• View
• Edit
• History
• Print

SSLCertificateCreation

To create an RSA key and RSA certificate that you can use with Xymphony, do the following.

Download the Getgnuwin32.exe file from the https://sourceforge.net/projects/getgnuwin32/files/ link for the Self-Signed Certificate Generation with OpenSSL. Run Getgnuwin32.exe and install it.

After installing OpenSSL, remove the openssl.cnf configuration file from the zip and copy OpenSSL under the Bin folder in the folder you installed.

Run the command prompt as Administrator and enter the set OPENSSL_CONF = c: \ "folder where you installed the openssl" \ bin \ openssl.cnf.

Windows command prompt in the bin folder in the folder where openssl is installed (c: \ "openssl opens the folder" \ bin) and write openssl and enter

To create a key file and certificate in PEM format 1024b, enter OpenSSL> req -x509 -newkey rsa: 1024 -keyout mykey.pem -out cert.pem -days 3650 '.

• x509: certificate command
• newkey: command to create a new key file
• rsa:1024: 1024-bit key file creation command
• keyout: command of the file name of the key file to be created
• mykey.pem: The name of the key file. You can change the name provided that the extension is .pem
• out: command of the file name of the certificate file to be created
• cert.pem: certificate file name. You can change the name provided that the extension is .pem
• days: is the command of how many days the certificate file will be valid.

After the command is entered, you will be prompted for a key file with at least 4 letters;

Loading 'screen' into random state - done
Generating a 1024 bit RSA private key
............................++++++
............................++++++
writing new private key to 'mykey.pem'
Enter PEM pass phrase: (enter at least 4 charecters)
Verifying - Enter PEM pass phrase: : (Re-enter at least 4 charecters)

After entering the password, you are asked about the owner of the certificate;

		-----

You are about to be asked to enter information that will be incorporated into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.

Nom du pays (2 letter code) [AU]: (Enter Your Country Code. for Turkey: TR)
Nom du department: (Department name)
Nom de ville (eg, city) []: (City Name. For example Ankara)
Raison sociale (eg, company) [Internet Widgits Pty Ltd]: (Company name. For example Telesis A.S.)
Non comercial (eg, section) []: (Blank)
Adresse du site a securiser []: (Enter the Xymphony ip address)

To convert key file produced in the format Pem 'to key format;

Enter command which shown below

OpenSSL> rsa -outform der -in mykey.pem -out mykey.key'

Enter pass phrase for mykey.pem: (enter the password you created above) writing RSA key

• rsa: key file change command
• outform: the final format command of the file to be converted
• der: command that the format of the key file will be "der"
• '''in:
• '''mykey.pem:
• '''out:

mykey.key:The extension has to be .key'''

To convert the certificate file "pem" format to "Der" format;

OpenSSL> x509 -outform der -in cert.pem -out cert.der

You have created two files named mykey.key and cert.der, which you can use under the folder that you run the OpenSSL.exe command, and you can use Xymphony.

To install the RSA key and RSA certificate file that you created, click the '% color = red% RSA key upload ' on the Basic ethernet settings page that is opened with Ethernet / Basic, and then install the .key extension (mykey.key) file that you created with openssl.

Upload the .der extension (cert.der) file that you created by clicking on '% color = red% RSA certificate upload ' on the same page.

Restart the Xymphony so that the change is valid.

Install the certificate file that you created in the Install certificate on your web browser's settings page. Your web browser will now provide a secure connection without warning, in connection with https.